CVE Watch22 de out. de 2026

CVE-2026-87940

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access C

CVSS

—

Sem CVSS

EPSS

0.2%

p14

KEV

—

Exploit Today

0-100

Publicado: 22 de out. de 2026 · Última mod.: 22 de out. de 2026 · CWE-525

EPSS · 30d

0.1%EPSS · 30 dias0.2%

2026-10-222026-11-06

Descrição técnica

Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Key auth allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Key auth versions: from 0.0.0 to 2.2.4.

Referências oficiais

www.drupal.orghttps://www.drupal.org/sa-contrib-2026-138

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-1185715.9 MÉD

3.4%

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Media Alias Display allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Media Alias Display versions: from 0.0.0 to 2.1.3, from 3.0.0 to 3.0.3.1d CVE-2026-1185505.9 MÉD

8.7%

——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal AI (Artificial Intelligence) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AI (Artificial Intelligence) versions: from 0.0.0 to 1.4.11, from 1.5.0 to 1.5.2.1d CVE-2026-1145483.7 BAI

4.2%

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal ImageAPI Optimize WebP allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects ImageAPI Optimize WebP versions: from 0.0.0 to 2.1.2.1d CVE-2026-1145463.7 BAI

4.2%

——1Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Simple OAuth (OAuth2) & OpenID Connect allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple OAuth (OAuth2) & OpenID Connect versions: from 6.1.0 to 6.1.3.1d CVE-2026-96369—

11.1%

——3Use of Web Browser Cache Containing Sensitive Information vulnerability in Drupal Webform allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Webform versions: from 0.0.0 to 6.2.12, from 6.3.0 to 6.3.1.17d